Automation to assess the state of your M365 tenant against CISA's baselines
A DFIR tool written in Python.
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
SCuBA Secure Configuration Baselines and assessment tool for Google Workspace
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.
This repository contains curated ISACA CISA (Certified Information Systems Auditor) exam dump questions and study material. It is designed to help candidates prepare for the CISA certification exam by providing access to a wide range of practice questions and learning resources.
Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list
Native cloud infrastructure for automatically running ScubaGear/ScubaGoggles
Build a CVE library with aggregated CISA, EPSS and CVSS data
Zero-Trust Cloud Modernization Framework for Federal and Enterprise Environments with IaC, Security Policies, and Monitoring Design
23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV โ unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.
CISA Known Exploited Vulnerabilities Catalog Enrichment
๐ฐ๐ฑ ๐ฝ๐ฟ๐ผ๐ฑ๐๐ฐ๐๐ถ๐ผ๐ป-๐ด๐ฟ๐ฎ๐ฑ๐ฒ ๐๐ฅ๐ ๐ฝ๐ฟ๐ผ๐บ๐ฝ๐๐ ๐ฎ๐ฐ๐ฟ๐ผ๐๐ ๐ญ๐ฏ ๐ฑ๐ผ๐บ๐ฎ๐ถ๐ป๐. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. ๐ฅ๐ฎ๐๐ฒ๐ฑ ๐ต.๐ฑ/๐ญ๐ฌ ๐ข๐ป ๐จ๐๐ฎ๐ฏ๐ถ๐น๐ถ๐๐ ๐ฎ๐ป๐ฑ ๐ฃ๐ฟ๐ฎ๐ฐ๐๐ถ๐ฐ๐ฎ๐น ๐๐ฝ๐ฝ๐น๐ถ๐ฐ๐ฎ๐๐ถ๐ผ๐ป
Crosswalk Nessus findings with the CISA Known and Exploited Vulnerabilities (KEV) catalog.
CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild and CryptoGen Nepal aims to simplify this for the general public in a more understandable way as well as in a format that can be easily integrated into their threat intelligence systems.
To associate your repository with the cisa topic, visit your repo's landing page and select "manage topics."